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(57) Abrege/Abstract: 

A method and system for auditing software systems by monitoring the use and non-use of software programs in a computer. An 
operating system of the computer controls execution of software products through the invocation of respective load modules 
thereof. A monitor is periodically triggered to collect load module execution information and a correlator correlates load module 
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(57) Abr6ge(suite)/Abstract( continued): 

execution information with data that associates load module names with corresponding software products and develops a list of 
products executed in the computer over the course of a given time period. Alternatively, rather than operating periodically, the 
monitor collects load module execution information at the end of and by being triggered by computer processes controlled by 
the operating system. As a further alternative, the monitoring of the execution of software products is detected by monitoring 
inputs and/or outputs to specific files or datasets, reflecting uniquely the use of corresponding software products. The invention 
also provides the ability to determine the load libraries and search order for load modules being executed or called by the 
operating system. 



-2- 



